Techbrunch

From Le Monde in French:

"Une partie (exploitable) de la fuite consiste en une base de données structurées des quelque 215 000 structures offshore de la firme panaméenne Mossack Fonseca avec, pour chacune, les dates de création, de dissolution, l’identité des actionnaires déclarés et leur lieu de domiciliation. Cette partie sera publiée en mai par le consortium international des journalistes d’investigation (ICIJ), qui a coordonné l’investigation."

I'm too lazy to translate it for you but basically it says that part of the leak will be released in May. They also wrote an article explaining why they don't release everything: http://www.lemonde.fr/panama-papers/article/2016/04/04/pourq...

No, today's leak has not yet been published. This the leak from 2013, 260Gb of data named the Offshore Leaks: https://fr.wikipedia.org/wiki/Offshore_Leaks

Hey, I run a private bug bounty program on HackerOne and we get those emails regularly, most of the times they did not find anything serious and they are just checking if you have one to see if they should invest time in it.

With a new startup and nobody looking at it they are more likely to find something :) You should just be honest and tell send to the details to security@youcompany.com you can also create a private program on one of the bug bounty plateform and invite them, they will get reputation/kudos if they find something.

From Shmoocon Firetalks 2016, check the talk here: https://youtu.be/tksYvAVKqxM

I think he was referring to this episode of South Park: https://en.wikipedia.org/wiki/Handicar

SRXP.com | C# / Xamarin | Onsite in Amsterdam | Full Time

ABOUT: SRXP offers an efficient and user-friendly solution to digitise expense reporting. The tool consists of a mobile app and online portal and is innovated continuously. We sell to large Dutch and international corporates, such as Bugaboo, Randstad, and CheapTickets. The team consists now of 15 members and is growing quickly. Our office is situated at Amsterdam Science Park. We offer flat hierarchy, good salary, organised lunches, and a professional and fun team. Successes are celebrated every Friday with some drinks.

JOB: We are looking for an experienced C# developer who is eager to start as soon as possible at our company. We have a lot of cool features lined-up that that we want to release quickly so we’re looking for someone who wants to work at least 32 hours a week. Also our new designer just started, so we are also on the verge of a complete redesign. We have just started to work with Xamarin to release more quickly across all platforms (Android, iOS, and Windows Phone). Other tools we work with are AWS, Git, Bitbucket, and JIRA. Our app developers are expected to think proactively about the user-friendliness of the apps as well. Taking initiative to introduce new features is highly appreciated.

More info: http://www.srxp.com/company/jobs/xamarin-developer/

I reported the same vulnerability to a company with millions of users last week, as of now it is still not fixed ...

How can I contact you ?

Nice, I have started to collect a list of newsletters in a google spreadsheet if you want to take a look or add some help yourself: https://docs.google.com/spreadsheets/d/1u7Kb7iz6H5dnJJkOmZcd...

Quick question I have subscribed to the RSS and receive emails thanks to IFTTT but why don't Amazon send also those emails ? Do they only send an email if you have to take some actions ?

Edit: You can find the recipe I'm using here: https://ifttt.com/recipes/270862-amazon-security-bulletins-t...

The is an atom plugin available: https://github.com/artoale/atom-tern

Or this one: https://bitbucket.org/site/master/issue/6315/relative-urls-i...

You can vote for this issue here:https://bitbucket.org/site/master/issue/5811/support-two-fac...

It made me think of this tumbler :| http://lookimagirlgamerz.tumblr.com/

A more relevant link would probably be this one: http://seriot.ch/abusing_twitter_api.php#4

I hope they are not gonna use this as an excuse to pass new laws to increase surveillance.

The classic labyrinth game where you control a steel ball by tilting a wooden labyrinth except that it's online thanks to Socket.IO, Arduino and the Leap Motion.

I did not found the time to follow this session, but I will follow the next one for sure :)

mail sent.

Hey guys I found half a dozen stored XSS who should I contact ?